CYBER CRIME & CYBER SECURITY
TRENDS IN AFRICA
35
Figure 12. Percentage of Attacks Targeting Africa with Global Comparison—2016
Microsoft Windows .lnk file code execution
(LNK_MsWin_Code_Execution)
92%
8%
Fake Scan Webpage
99%
1%
Generic W32.Mabezat Attack
69%
31%
Fake Scan Webpage Attack
1%
99%
Malicious JavaScript Redirection
1%
99%
Fake Browser Update
2%
98%
Mass Injection Website
2%
98%
Nuclear Exploit Kit Redirect
2%
98%
Malicious File Download Request
1%
99%
Bash CGI Environment Variable CVE-2014-6271 Attack
<1%
99%
0%
20%
40%
Africa
60%
Rest of the World
MALWARE ANALYSIS
Malware is software that attackers use to steal confidential information, destroy data, disrupt computer
operations, or gain access to the network from the compromised system. Types of malware include
viruses, worms, Trojans, and ransomware, and they spread through the use of a variety of tools such
as email, drive-by downloads, and infected files. They can also exploit existing vulnerabilities to infect
systems.
Top Malware Originating from Africa
During the reporting period, there were nearly 2.2 million malware incidents over 213 different
malware signatures originating from Africa, all accounting for 1.5% of global malware. During the
reporting period, the top malware originating from Africa was W32.SillyFDC.BDP Attack with 1,025,563
incidents, accounting for 47% of the total (see Table 10 and Figure 13). W32.SillyFDC.BDP3 is a worm
that spreads through network shares and removable media by exploiting two vulnerabilities in
Microsoft Windows4,5. The worm downloads other malicious files on the compromised computer to
further spread by posing as a DHCP server for the network.
3
4
5
https://www.symantec.com/security_response/writeup.jsp?docid=2011-031106-4835-99
http://www.securityfocus.com/bid/41732
http://www.securityfocus.com/bid/31874
80%
100%